๐ฎ๐น
paoloartone
2026-10-12 05:00:18
(2 days ago)
Reverse proxy TCO: 6896 richieste malevole bloccate (scan/exploit/brute-force WordPress) il 11/10/20 ...
show more
Reverse proxy TCO: 6896 richieste malevole bloccate (scan/exploit/brute-force WordPress) il 11/10/2026.
show less
Web App Attack
Hacking
Port Scan
๐บ๐ธ
TPI-Abuse
2026-10-11 14:14:45
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 35.185.109.67 (67.109.185.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 35.185.109.67 (67.109.185.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 11 10:14:38.981516 2026] [security2:error] [pid 20549:tid 20572] [client 35.185.109.67:33526] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.gelatoconsapevole.it"] [uri "/assets../.env"] [unique_id "asuZzn7Hgbf4-9KNBBM_TQAAAFE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-10-11 12:11:41
(3 days ago)
35.185.109.67 - - [11/Oct/2026:14:11:40 +0200] "GET /api/uploads/%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2 ...
show more
35.185.109.67 - - [11/Oct/2026:14:11:40 +0200] "GET /api/uploads/%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f.env HTTP/2.0" 404 265 "-" "Mozilla/5.0 (compatible; Meta-ExternalAgent/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler)"
35.185.109.67 - - [11/Oct/2026:14:11:40 +0200] "GET /icons/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/proc/self/environ HTTP/2.0" 400 295 "-" "Mozilla/5.0 (compatible; Meta-WebIndexer/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler)"
35.185.109.67 - - [11/Oct/2026:14:11:40 +0200] "GET /..%2f..%2f.env HTTP/2.0" 404 265 "-" "Mozilla/5.0 (compatible; Bravebot/1.0; +https://brave.com/search/)"
35.185.109.67 - - [11/Oct/2026:14:11:40 +0200] "GET /..%2f.env HTTP/2.0" 404 265 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
35.185.109.67 - - [11/Oct/2026:14:11:40 +0200] "GET /uploads/%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f.env HTTP/2.0" 404 265 "-" "Mozilla/5.0 (compatible; MoonshotBot/1.0; +https://kimi.ai/)"
...
show less
Brute-Force
SSH
Anonymous
2026-10-11 09:58:06
(3 days ago)
35.185.109.67 - - [11/Oct/2026:11:58:05 +0200] "GET /..%2f..%2f.env HTTP/2.0" 404 265 "-" "Mozilla/5 ...
show more
35.185.109.67 - - [11/Oct/2026:11:58:05 +0200] "GET /..%2f..%2f.env HTTP/2.0" 404 265 "-" "Mozilla/5.0 (compatible; Bravebot/1.0; +https://brave.com/search/)"
35.185.109.67 - - [11/Oct/2026:11:58:05 +0200] "GET /%2e%2e/.env HTTP/2.0" 400 295 "-" "CCBot/2.0 (https://commoncrawl.org/faq/)"
35.185.109.67 - - [11/Oct/2026:11:58:05 +0200] "GET /..%2f.env HTTP/2.0" 404 265 "-" "Mozilla/5.0 (compatible; KimiBot/1.0; +https://kimi.ai/)"
35.185.109.67 - - [11/Oct/2026:11:58:05 +0200] "GET /icons/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/proc/self/environ HTTP/2.0" 400 295 "-" "CCBot/2.0 (https://commoncrawl.org/faq/)"
35.185.109.67 - - [11/Oct/2026:11:58:05 +0200] "GET /admin%2F.env HTTP/2.0" 404 265 "-" "Mozilla/5.0 (compatible; Bravebot/1.0; +https://brave.com/search/)"
...
show less
Brute-Force
SSH
๐ณ๐ฑ
Savvii
2026-10-11 09:15:28
(3 days ago)
20 attempts against mh-misbehave-ban on mars
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-10-11 08:04:51
(3 days ago)
35.185.109.67 - - [11/Oct/2026:10:04:50 +0200] "GET /dashboard%2F.env HTTP/2.0" 404 265 "-" "Mozilla ...
show more
35.185.109.67 - - [11/Oct/2026:10:04:50 +0200] "GET /dashboard%2F.env HTTP/2.0" 404 265 "-" "Mozilla/5.0 (compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot)"
35.185.109.67 - - [11/Oct/2026:10:04:50 +0200] "GET /admin%2F.env HTTP/2.0" 404 265 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Perplexity-User/1.0; +https://perplexity.ai/perplexity-user)"
35.185.109.67 - - [11/Oct/2026:10:04:50 +0200] "GET /api/attachments/img/avatar/..%2F..%2F..%2F..%2F..%2Fproc%2Fself%2Fenviron HTTP/2.0" 404 265 "-" "Mozilla/5.0 (compatible; Kimi-SearchBot/1.0; +https://kimi.ai/)"
35.185.109.67 - - [11/Oct/2026:10:04:50 +0200] "GET /api%2F.env HTTP/2.0" 404 265 "-" "Mozilla/5.0 (compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot)"
35.185.109.67 - - [11/Oct/2026:10:04:50 +0200] "GET /api/uploads/%2e%2e%2f%2e%2e%2f%2e%2e%2fproc/self/environ HTTP/2.0" 404 265 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-SearchBo
...
show less
Brute-Force
SSH
Anonymous
2026-10-11 07:20:27
(3 days ago)
35.185.109.67 - - [11/Oct/2026:09:20:26 +0200] "GET /..%2f..%2f.env HTTP/2.0" 404 265 "-" "Mozilla/5 ...
show more
35.185.109.67 - - [11/Oct/2026:09:20:26 +0200] "GET /..%2f..%2f.env HTTP/2.0" 404 265 "-" "Mozilla/5.0 (compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot)"
35.185.109.67 - - [11/Oct/2026:09:20:26 +0200] "GET /static/../../../a/../../../../.env HTTP/2.0" 400 295 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; [email protected] )"
35.185.109.67 - - [11/Oct/2026:09:20:26 +0200] "GET /%2E%2E/%2E%2E/%2E%2E/%2E%2E/.env HTTP/2.0" 400 295 "-" "Mozilla/5.0 (compatible; ChatGLM-Spider/1.0; +https://zhipuai.cn/)"
35.185.109.67 - - [11/Oct/2026:09:20:26 +0200] "GET /%2E%2E/%2E%2E/%2E%2E/%2E%2E/proc/self/environ HTTP/2.0" 400 295 "-" "Mozilla/5.0 (compatible; YouBot/1.0; +https://you.com/bot)"
35.185.109.67 - - [11/Oct/2026:09:20:26 +0200] "GET /api/uploads/%2e%2e%2f%2e%2e%2f%2e%2e%2f.env HTTP/2.0" 404 265 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Saf
...
show less
Brute-Force
SSH
Anonymous
2026-10-11 06:12:54
(3 days ago)
35.185.109.67 - - [11/Oct/2026:08:12:53 +0200] "GET /api/uploads/%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2 ...
show more
35.185.109.67 - - [11/Oct/2026:08:12:53 +0200] "GET /api/uploads/%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f.env HTTP/2.0" 404 265 "-" "Mozilla/5.0 (compatible; Bytespider; [email protected] ) AppleWebKit/537.36"
35.185.109.67 - - [11/Oct/2026:08:12:53 +0200] "GET /api/uploads/%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2fproc/self/environ HTTP/2.0" 404 265 "-" "Mozilla/5.0 (compatible; Qwenbot/1.0; +https://qwen.alibaba.com/)"
35.185.109.67 - - [11/Oct/2026:08:12:53 +0200] "GET /uploads/%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f.env HTTP/2.0" 404 265 "-" "Mozilla/5.0 (compatible; Hunyuan/1.0; +https://hunyuan.tencent.com/)"
35.185.109.67 - - [11/Oct/2026:08:12:53 +0200] "GET /api/uploads/%2e%2e%2f%2e%2e%2f.env HTTP/2.0" 404 265 "-" "Mozilla/5.0 (compatible; DeepSeekBot/1.0; +https://www.deepseek.com/)"
35.185.109.67 - - [11/Oct/2026:08:12:53 +0200] "GET /api/uploads/%2e%2e%2f%2e%2e%2f%2e%2e%2f.env HTTP/2.0" 404 265 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Perpl
...
show less
Brute-Force
SSH
Anonymous
2026-10-11 05:06:42
(3 days ago)
35.185.109.67 - - [11/Oct/2026:07:06:41 +0200] "GET /api/uploads/%2e%2e%2f%2e%2e%2f.env HTTP/2.0" 40 ...
show more
35.185.109.67 - - [11/Oct/2026:07:06:41 +0200] "GET /api/uploads/%2e%2e%2f%2e%2e%2f.env HTTP/2.0" 404 265 "-" "Mozilla/5.0 (compatible; YouBot/1.0; +https://you.com/bot)"
35.185.109.67 - - [11/Oct/2026:07:06:41 +0200] "GET /admin%2F.env HTTP/2.0" 404 265 "-" "Mozilla/5.0 (compatible; cohere-ai; +https://cohere.com/crawler)"
35.185.109.67 - - [11/Oct/2026:07:06:41 +0200] "GET /api/uploads/%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f.env HTTP/2.0" 404 265 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; PerplexityBot/1.0; +https://perplexity.ai/perplexitybot)"
35.185.109.67 - - [11/Oct/2026:07:06:41 +0200] "GET /icons/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/proc/self/environ HTTP/2.0" 400 295 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-SearchBot/1.0; [email protected] )"
35.185.109.67 - - [11/Oct/2026:07:06:41 +0200] "GET /dashboard%2F.env HTTP/2.0" 404 265 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@
...
show less
Brute-Force
SSH
๐ฎ๐น
paoloartone
2026-10-11 05:00:17
(3 days ago)
Reverse proxy TCO: 985 richieste malevole bloccate (scan/exploit/brute-force WordPress) il 10/10/202 ...
show more
Reverse proxy TCO: 985 richieste malevole bloccate (scan/exploit/brute-force WordPress) il 10/10/2026.
show less
Web App Attack
Hacking
Port Scan
Anonymous
2026-10-11 04:00:17
(3 days ago)
35.185.109.67 - - [11/Oct/2026:06:00:16 +0200] "GET /static/%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2fproc ...
show more
35.185.109.67 - - [11/Oct/2026:06:00:16 +0200] "GET /static/%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2fproc/self/environ HTTP/2.0" 404 265 "-" "Mozilla/5.0 (compatible; DeepSeekBot/1.0; +https://www.deepseek.com/)"
35.185.109.67 - - [11/Oct/2026:06:00:16 +0200] "GET /admin%2F.env HTTP/2.0" 404 265 "-" "Mozilla/5.0 (compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot)"
35.185.109.67 - - [11/Oct/2026:06:00:16 +0200] "GET /static/../../../a/../../../../proc/self/environ HTTP/2.0" 400 295 "-" "Mozilla/5.0 (compatible; Meta-ExternalFetcher/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler)"
35.185.109.67 - - [11/Oct/2026:06:00:16 +0200] "GET /api/uploads/%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f.env HTTP/2.0" 404 265 "-" "Mozilla/5.0 (compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot)"
35.185.109.67 - - [11/Oct/2026:06:00:16 +0200] "GET /%2E%2E/%2E%2E/%2E%2E/%2E%2E/.env HTTP/2.0" 400 295 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like
...
show less
Brute-Force
SSH
Anonymous
2026-10-11 02:52:17
(3 days ago)
35.185.109.67 - - [11/Oct/2026:04:52:17 +0200] "GET /api/uploads/%2e%2e%2f%2e%2e%2f.env HTTP/2.0" 40 ...
show more
35.185.109.67 - - [11/Oct/2026:04:52:17 +0200] "GET /api/uploads/%2e%2e%2f%2e%2e%2f.env HTTP/2.0" 404 265 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; GPTBot/1.4; +https://openai.com/gptbot"
35.185.109.67 - - [11/Oct/2026:04:52:17 +0200] "GET /uploads/%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f.env HTTP/2.0" 404 265 "-" "Mozilla/5.0 (compatible; YouBot/1.0; +https://you.com/bot)"
35.185.109.67 - - [11/Oct/2026:04:52:17 +0200] "GET /%2E%2E/%2E%2E/%2E%2E/%2E%2E/.env HTTP/2.0" 400 295 "-" "Mozilla/5.0 (compatible; KimiBot/1.0; +https://kimi.ai/)"
35.185.109.67 - - [11/Oct/2026:04:52:17 +0200] "GET /%2E%2E/%2E%2E/%2E%2E/%2E%2E/proc/self/environ HTTP/2.0" 400 295 "-" "Mozilla/5.0 (compatible; Meta-ExternalFetcher/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler)"
35.185.109.67 - - [11/Oct/2026:04:52:17 +0200] "GET /static/../../../a/../../../../.env HTTP/2.0" 400 295 "-" "Mozilla/5.0 (compatible; KimiBot/1.0; +https://kimi.ai/)"
...
show less
Brute-Force
SSH
Anonymous
2026-10-11 02:35:34
(3 days ago)
CrowdSec: crowdsecurity/http-sensitive-files
Hacking
Web App Attack
Anonymous
2026-10-11 02:12:32
(3 days ago)
CrowdSec: crowdsecurity/http-probing
Port Scan
Hacking
Web App Attack
Anonymous
2026-10-11 01:49:22
(3 days ago)
CrowdSec: crowdsecurity/http-path-traversal-probing
Port Scan
Hacking
Web App Attack